[spxrogers]

Summary

The Chocolatey validator flagged three guidelines on the 0.17.0 submission. This PR fixes all three in the chocolateys: block of .goreleaser.yaml:

Rule	Before	After
CPMR0033: iconUrl missing	not set	https://agentsync.cc/icon.png
CPMR0041: projectUrl equals projectSourceUrl	both were the GitHub repo	projectUrl is https://agentsync.cc/; projectSourceUrl is still the repo
CPMR0050: title equals id	agentsync	agentsync CLI
CPMR0068 (Note): owners equals authors	n/a	Unchanged, since the maintainer is the author. A config comment now records that.

• Icon. The new file is website/public/icon.png, a 256×256 PNG with a transparent background, rendered from website/public/favicon.svg. Chocolatey's icon guidance strongly prefers PNG, wants at least 128px, and asks for hosting you control or a CDN rather than raw.githubusercontent.com. GoReleaser 2.16 doesn't template icon_url, so the URL can't include the release tag. It is a fixed path on our own domain instead.
• docs_url now points to /getting-started/introduction/, so it no longer duplicates the new project URL.
• Wording. The README and a config comment said a release waits "a day or two" for human moderation. agentsync is now a trusted package that skips human review, so the text now says new versions are listed once the automated checks pass, usually within a few hours. CHANGELOG.md has a matching entry under [Unreleased].

Before the next release: run the docs-publish workflow once after this merges, so agentsync.cc/icon.png is live. In the release workflow the Chocolatey push runs before the site redeploys.

Type of change

• Bug fix
• New feature / enhancement
• Refactor (no behavior change)
• Docs
• Tests / CI / tooling

Test plan

No Go code changed. This touches release config, docs and one static asset.

• goreleaser check with v2.16.0, the version the release workflow pins, validates the config.
• I installed choco 2.7.3 on Mono in the container, the same way release.yml does. Then I ran goreleaser release --snapshot --skip=publish,sign --clean. The chocolatey pipe packed dist/agentsync.<snapshot>.nupkg, and the agentsync.nuspec inside it contains:

  <title>agentsync CLI</title>
  <projectUrl>https://agentsync.cc/</projectUrl>
  <iconUrl>https://agentsync.cc/icon.png</iconUrl>
  <projectSourceUrl>https://github.com/spxrogers/agentsync</projectSourceUrl>
  <docsUrl>https://agentsync.cc/getting-started/introduction/</docsUrl>

• I checked by eye that the rendered icon matches the favicon.
• just test-release is green (the release bar). Not run, because no Go code changed.
• just lint is clean. Not run, because no Go sources or go.mod changed.

Checklist

• Conventional commit messages with a scope (e.g. fix(secrets): …).
• Tests added/updated for the behavior changed. Not applicable; the snapshot pack above verifies it.
• If this touches internal/secrets, internal/capture, or any source.Write* path, I've re-read the secret-handling invariants in CLAUDE.md / SECURITY.md and not weakened them. Not touched.
• Docs updated if behavior, CLI surface, or capability coverage changed.

🤖 Generated with Claude Code

https://claude.ai/code/session_01JNYegSG2ejMfzweNprWWEB

---

Generated by Claude Code